# CyberChef v10.21.0

- Product: CyberChef (https://whatsnew.fyi/product/cyberchef)
- Vendor: gchq
- Date: 2026-02-06
- Version: v10.21.0
- Original notes: https://github.com/gchq/CyberChef/releases/tag/v10.21.0
- Permalink: https://whatsnew.fyi/product/cyberchef/releases/v10.21.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Fix import operations with special chars in them
- **fixed** — Correctly parse xxd odd byte hexdumps
- **changed** — Update Sitemap URLs to Use Valid Paths in sitemap.mjs
- **removed** — Remove version 10 message from banner
- **changed** — Update crypto browserify
- **changed** — Update kbpgp package
- **fixed** — Fix the processing of ALPNs for JA4 to align with new specification update
- **added** — Add Bech32 and Bech32m encoding/decoding operations
- **fixed** — Exclude Delete character from hex dump output
- **fixed** — Tiny typo fix in To Base85 operation

- Fix import operations with special chars in them [@d98762625] [@jg42526] | [#1040]
- Remove custom CodeQL workflow [@C85297] | [#2176]
- Fix code scanning warnings in workflows [@GCHQDeveloper581] | [#2177]
- Use NPM trusted publishing [@C85297] [@GCHQDeveloper581] | [#2174]
- Fix: Correctly parse xxd odd byte hexdumps [@ThomasNotTom] [@GCHQDeveloper581] | [#2058]
- Update Sitemap URLs to Use Valid Paths in sitemap.mjs [@rbpi] [@C85297] | [#1861]
- Use recommended GitHub Actions to build image [@AlexGustafsson] [@C85297] | [#2055]
- Remove version 10 message from banner [@C85297] | [#2169]
- Bump form-data from 4.0.1 to 4.0.5  | [#2175]
- Bump node-forge from 1.3.1 to 1.3.3  | [#2173]
- Update crypto browserify [@C85297] | [#2172]
- Update kbpgp package (resolves #2135) [@GCHQDeveloper581] | [#2136]
- Fix the processing of ALPNs for JA4 to align with new specification update [@tuliperis] | [#2165]
- Add Bech32 and Bech32m encoding/decoding operations [@thomasxm] | [#2159]
- Exclude Delete character from hex dump output [@mikecat] [@C85297] | [#2086]
- Tiny typo fix in "To Base85" operation [@twostraws] | [#2118]
- Bump jsonpath-plus [@C85297] | [#2166]